Skill UI

Outlines secure Obsidian plugin development steps for protecting vault data, validating inputs, minimizing permissions, and enforcing HTTPS when handling sensitive operations.

Guides teams integrating with OpenEvidence to apply HIPAA-safe workflows for credential handling, PHI sanitization, audit logging, webhook verification, and retention policies before production deployment.

Guides teams to secure PostHog deployments by storing API keys in env vars, rotating secrets, applying least privilege scopes, and logging audits for controlled access.

Guides developers through Replit-specific best practices for protecting API keys, rotating secrets, enforcing least privilege scopes, and auditing access logs when securing deployments across dev/staging/prod environments.

Practical steps for securely handling Retell AI API keys, rotating secrets, limiting scopes, and enabling audit logging when configuring SDK access or reviewing deployments.

A comprehensive fullstack development toolkit designed to accelerate project setup and maintain code health. It provides project scaffolding for popular stacks (Next.js, FastAPI, MERN, Django), generating complete boilerplate code, Docker configurations, and environment templates. Furthermore, the Code Quality Analyzer audits existing codebases for critical security vulnerabilities, complexity metrics, and dependency issues, ensuring high standards throughout the development lifecycle. Ideal for new project initiation and routine code auditing.

Guides configuring Sentry security settings, covering data scrubbing, DSN protection, least-privilege access, audit logging, and documentation so teams can safely manage sensitive telemetry.

Guides teams through Supabase best practices for securing API keys, enforcing least privilege access, and auditing configuration, so you can harden secrets handling during deployment or review cycles.

Guide for securing TwinMind integrations by managing API keys, validating webhook signatures, encrypting stored data, enforcing RBAC, configuring privacy options, and logging audit trails.

Covers securing Vast.ai API keys, rotating secrets, and enforcing least-privilege controls so teams can audit and protect access across dev/staging/production environments.

Applies Vercel security best practices around secret management and access control, covering secure API key storage, least-privilege workflows, scoped environments, and audit logging for safer deployments.

Explains how to store Windsurf API keys safely, rotate secrets, enforce least-privilege scopes, validate webhooks, and log audits so teams can secure Windsurf integrations across dev/staging/prod environments.